CVE-2014-2421

Name: CVE-2014-2421
Creator: NVD / NIST
Published: 2014-04-16T02:55:15.49+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 6.58%

Last modified Jun 17, 2026

CVE-2014-2421 is a vulnerability of currently unknown severity. Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.. EPSS estimates a 6.58% chance of exploitation in the next 30 days.

Description

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

Metrics

EPSS Probability

6.58%

93.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions	Update
Canonical	Ubuntu Linux	10.04	—
Canonical	Ubuntu Linux	12.04	—
Canonical	Ubuntu Linux	12.10	—
Canonical	Ubuntu Linux	13.10	—
Canonical	Ubuntu Linux	14.04	—
Oracle	Jrockit	r27.8.1	—
Oracle	Jrockit	r28.3.1	—
Juniper	Junos Space	< 15.1	—
Oracle	Jdk	1.5.0	Update61
Oracle	Jdk	1.6.0	Update71
Oracle	Jdk	1.7.0	Update51
Oracle	Jdk	1.8.0	—
Oracle	Jre	1.5.0	Update61
Oracle	Jre	1.6.0	Update71
Oracle	Jre	1.7.0	Update51
Oracle	Jre	1.8.0	—
Debian	Debian Linux	6.0	—
Debian	Debian Linux	7.0	—
Debian	Debian Linux	8.0	—
Ibm	Forms Viewer	>= 4.0.0, < 4.0.0.3	—
Ibm	Forms Viewer	>= 8.0.0, < 8.0.1.1	—

References

http://marc.info/?l=bugtraq&m=140852886808946&w=2Issue Tracking, Mailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=140852974709252&w=2Issue Tracking, Mailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0675.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0685.htmlThird Party Advisory
http://secunia.com/advisories/58415Third Party Advisory
http://secunia.com/advisories/59058Third Party Advisory
http://security.gentoo.org/glsa/glsa-201406-32.xmlThird Party Advisory
http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21672080Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676746Third Party Advisory
http://www.debian.org/security/2014/dsa-2912Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlVendor Advisory
http://www.securityfocus.com/bid/66881Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2187-1Third Party Advisory
http://www.ubuntu.com/usn/USN-2191-1Third Party Advisory
https://access.redhat.com/errata/RHSA-2014:0413Third Party Advisory
https://access.redhat.com/errata/RHSA-2014:0414Third Party Advisory
http://marc.info/?l=bugtraq&m=140852886808946&w=2Issue Tracking, Mailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=140852974709252&w=2Issue Tracking, Mailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0675.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0685.htmlThird Party Advisory
http://secunia.com/advisories/58415Third Party Advisory
http://secunia.com/advisories/59058Third Party Advisory
http://security.gentoo.org/glsa/glsa-201406-32.xmlThird Party Advisory
http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21672080Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676746Third Party Advisory
http://www.debian.org/security/2014/dsa-2912Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlVendor Advisory
http://www.securityfocus.com/bid/66881Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2187-1Third Party Advisory
http://www.ubuntu.com/usn/USN-2191-1Third Party Advisory
https://access.redhat.com/errata/RHSA-2014:0413Third Party Advisory
https://access.redhat.com/errata/RHSA-2014:0414Third Party Advisory

Timeline

Published: Apr 16, 2014
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2014-2421?

How severe is CVE-2014-2421?

Severity scoring for CVE-2014-2421 is pending analysis. The EPSS model estimates a 6.58% probability of exploitation in the next 30 days.

How do I fix CVE-2014-2421?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-2421?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST